This solution must exclusively read from the kernel's Cryptographically Secure Pseudorandom Number Generator (CSPRNG) and fail closed. Userspace Random Number Generators (RNGs) and insecure RNG fallbacks will not be accepted.
libsodium-dev
Documentation at https://download.libsodium.org/libsodium/content/installation/
Step 1: make Step 2: ./rnd-sodium [number]
https://www.nist.gov/programs-projects/nist-randomness-beacon